March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Alert – Remcos RAT – Active IOCs
June 23, 2021
Rewterz Threat Alert – Nanocore Rat – Active IOCs
June 24, 2021
Rewterz Threat Alert – Remcos RAT – Active IOCs
June 23, 2021
Rewterz Threat Alert – Nanocore Rat – Active IOCs
June 24, 2021
Severity
High
Analysis Summary
CVE-2021-27274
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Authentication is not required to exploit this vulnerability. The specific flaw exists within the MFileUploadController class. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of SYSTEM.
Impact
- Code Execution
- Privilege Escalation
- Unauthorized Access
Affected Vendors
NETGEAR
Affected Products
- ProSAFE NMS300
Remediation
Update your Security Gateway product to the latest IPS update.
https://www.checkpoint.com/defense/advisories/public/2006/sbp-31-Jul.html